Surge in Unexpected +254 Calls: What Prompted the Recent Spike in Inquiries?
The surge in unauthorized cross-border traffic prompted quick action from telecom fraud prevention specialists. In Kenya, the Communications Authority tightened compliance requirements on cellular subscriber registration. Kenyan legislation strictly mandates biometric linkage and identity card documentation for every active SIM card, leading to regulatory crackdowns against grey-market vendors who sell pre-activated lines to third parties.
Simultaneously, Safaricom and rival East African operators deployed aggressive behavioral heuristics within their international gateways. Hardware devices known as "SIM boxes", unauthorized racks holding hundreds of physical SIM cards designed to bypass formal international termination rates, are routinely raided and seized by law enforcement in Nairobi and surrounding counties. These rogue gateways convert internet-based calls into local cellular traffic, obscuring the original overseas IP and creating confusion on recipient caller ID displays.
Foreign network operators have introduced structural defenses on their end. US, Canadian, and European carriers have spent years rolling out the STIR/SHAKEN cryptographic framework, which validates whether the telephone number on a caller ID matches the authorized customer placing the call. While STIR/SHAKEN performs reliably on domestic US-to-US or Canada-to-Canada calls, cross-border calls from foreign markets often lack end-to-end cryptographic certificates. To close this gap, major carriers now deploy real-time machine-learning firewalls that flag and sever high-volume, short-duration call bursts entering transit switches from abroad before the signals hit local towers.